Privacy Policy
At BigCheese, we strongly believe in the fundamental rights of privacy and personal data protection. Personal data is any information that identifies us directly (e.g., name) or indirectly (which can also be used, in some way, to identify someone, e.g., address or phone number).
This Privacy Statement establishes the way in which, as BigCheese, we protect, safeguard and treat personal data, by virtue of the related processes we have with our customers, potential customers, suppliers, potential suppliers and third parties, and, in the event that these are legal entities, their legal representatives or contact persons (hereinafter and as a whole, the “Customers, Suppliers and Third Parties”). Consequently, in terms of the applicable and current regulations for the protection of personal data (hereinafter, “Applicable Regulations”), it should be known that the relationship with our Clients, Suppliers and Third Parties involves access to and processing of personal data by BigCheese.
In this sense, we are committed to protect the privacy and personal data of our Customers, Suppliers and Third Parties, as well as to ensure compliance with the Applicable Regulations, in accordance with the regulations of the countries where the companies belonging to BigCheese are located. We treat personal data in a lawful, fair and transparent manner; attached to explicit and legitimate determined purposes, which are adequate, relevant, proportional and limited in relation to the purposes of the treatment. Furthermore, we are obliged to keep the data accurate and up to date, and to keep it in a form that makes it easy to identify, only for the time necessary to fulfill the purposes of the processing.
Categories of Personal Data
We collect personal data through the internal processes of registration Customers, Suppliers and Third Parties, and, where appropriate, through recruitment and during the relationship with them. By virtue of this and, in order to comply with the principle of proportionality, as well as data minimization, we collect only the personal data strictly necessary for the fulfillment of the relationship we have with our Customers, Suppliers and Third Parties.
The categories of personal data used are as follows.
● Identification and contact information.
● Financial and equity.
● Labor.
In the event that our Customers, Suppliers and Third Parties share with us data of third parties (for example: names, positions and contact details of their employees, administrators, shareholders or representatives), they must, beforehand, inform and/or have the authorization of such third parties regarding the processing of their personal data.
If, for any reason, the requested personal data cannot be shared with us for a specific process, where such data is necessary to fulfill the contractual relationship or our legal obligations, it will not be possible to provide our services or establish a business relationship.
Additionally, we ask our Customers, Suppliers and Third Parties to keep their personal data updated, as they undergo changes, and to always provide us with complete, truthful and correct information, in order to manage the necessary processes in a timely and efficient manner.
Purposes of Personal Data Processing
At BigCheese, we are committed to the principle of purpose limitation, so we only process personal data strictly necessary for the fulfillment of the legal relationship we have with our Customers, Suppliers and Third Parties.
Legitimizing Basis for Processing
We will process personal data on the basis of your legitimate interest, for the sole purpose of ensuring the maintenance of such relationship and for the duration of the same, and may subsequently keep them blocked for the periods arising from the prescription of legal actions related to such processing.
Personal data will be obtained directly from Clients, Suppliers and Third Parties, or indirectly, through the person responsible for the commitment, Partners, directors, attorneys-in-fact, among others, or through authorized transfers or publicly accessible sources, always with the purpose of carrying out the internal processes necessary to accept them as clients, suppliers or third parties of BigCheese .
Area in Charge of Handling Questions and Complaints
In compliance with the Applicable Regulations, BigCheese has established that the area in charge of handling queries and complaints from data owners is the Legal Department, within the Administration and Finance Management, through the following e-mail address: compliance@bigcheese.com.uy .
Means for the Exercise of the Data Subject’s Rights
To exercise the holder’s rights, please contact us by e-mail: compliance@bigcheese.com.uy. Requests must contain the following requirements.
Names and surnames of the right holder; accreditation of his/her identity, presenting a copy of his/her identity document with photograph; and, if applicable, also of his/her representative.
2. The specific request giving rise to the application.
3. Address, or physical and electronic address, to send the corresponding notifications.
4. Date and signature of the applicant.
5. Documents supporting the petition, if applicable.
The area in charge will send the respective response to the e-mail address from which the request for rights was sent, or to the address indicated in the communication. Any communication that lacks a physical or electronic address for reply will not be considered and will be discarded.
Confidentiality and Security of Personal Data
At BigCheese (this also applies to those involved in any part of the data processing), we are obliged to keep personal data confidential. This obligation remains in force even after the termination of the relationship with BigCheese. The obligation of confidentiality is extinguished when there is a prior, informed, express and unequivocal consent of the owner, a judicial decision, or when there are justified reasons related to national defense, as well as public security or public health, without prejudice to the right to keep professional secrecy.
On the other hand, in order to reasonably prevent the improper use or disclosure of the same, we have implemented physical, technical and administrative security measures, in accordance with the Applicable Regulations.
Transborder flow of personal data
At BigCheese, we may transfer your personal data received or collected to:
(i) any of the members of the BigCheese Group (“GBC”) and/or related, affiliated, controlled, controlling, subsidiary, subsidiary, representative or related companies of BigCheese and/or GBC or the members of GBC;
(ii) third party providers of administrative, infrastructure and other operational support services, regardless of the country where they are located (for which BigCheese will maintain adequate standards of confidentiality, protection and security similar to those required by the Applicable Regulations).
The transfer of personal data may be made to a country that does not have adequate standards of protection of personal data in accordance with the parameters established by the authorities and the Applicable Regulations and/or keep them hosted on a server that does not reside in your country or is outside the European Economic Area. In these cases, BigCheese requires, to those who transfer such data, compliance with appropriate standards of confidentiality, protection and security similar to those required by the Applicable Regulations, and that limit the use of such data to the specific purpose for which they were transmitted.
Communication/transfer of personal data
In accordance with the provisions of the Applicable Regulations and in accordance with BigCheese‘s internal policies and procedures, the communication/transfer of personal data to third party recipients may be carried out. The third party recipient of the personal data assumes the condition of data controller, in accordance with the Applicable Regulations, and shall carry out the processing of the personal data in compliance with the information previously provided by BigCheese.
The processing carried out by the third party recipient must comply with the provisions of this Privacy Statement. The communication or transfer must be formalized by means of mechanisms that make it possible to demonstrate that BigCheese communicated to the third party recipient the conditions under which the owner of the personal data consented to the processing of the same.
Changes to this Declaration
We may modify this Privacy Statement unilaterally, at any time we deem necessary, by informing you on our website. If we make any changes or modifications to this Privacy Statement, you will be able to see them in the “Updates” section at the end of this document. at the end of this document.
Duration
Personal data will be stored only for the period reasonably necessary to fulfill the purposes of use described in this Privacy Statement or for a maximum period of 10 years from the end of the legal relationship.